User’s Manual
Multi-WAN Security Gateway
Model No.: SP891
World Wide Web: www.micronet.com.tw ; www.micronet.info
2
Table of Content
-------------------------------------------------------------------------------------------------------------------------
1. INTRODUCTION ................................................................................................................. 4
1.1 Package Contents.............................................................................4
1.2 Features............................................................................................5
1.3 System Requirement.........................................................................5
1.4 Physical Description..........................................................................6
2. INSTALLATION................................................................................................................... 8
2.1 Hardware Installation.........................................................................8
2.2 Access Router...................................................................................8
3. BASIC CONFIGURATION ................................................................................................ 15
3.1 Primary Setup..................................................................................15
3.2 LAN & DHCP...................................................................................17
4. ADVANCED PORT SETUP............................................................................................... 20
4.1 Port Options ....................................................................................20
4.2 Load Balance ..................................................................................22
4.3 Advanced PPPoE............................................................................23
4.4 Advanced PPTP..............................................................................24
5. ADVANCED CONFIGURATION ....................................................................................... 27
5.1 Host IP Setup..................................................................................27
5.2 Routing............................................................................................29
5.3 Virtual Servers.................................................................................31
5.4 Special Applications ........................................................................34
5.5 Dynamic DNS..................................................................................35
5.6 Multi DMZ........................................................................................37
5.7 UPnP...............................................................................................38
5.8 NAT Setup.......................................................................................38
5.9 Advanced Features.........................................................................40
6. SECURITY MANAGEMENT ............................................................................................. 43
6.1 URL Filter ........................................................................................43
6.2 Access Filter....................................................................................44
6.3 Session Limit...................................................................................45
6.4 SysFilter Exception .........................................................................46
7. QOS CONFIGURATION.................................................................................................... 48
7.1 QoS Setup.......................................................................................48
7.2 QoS Policy.......................................................................................49
8. MANAGEMENT ASSISTANT............................................................................................ 50
8.1 Administration Setup.......................................................................50
3
8.2
Email Alert.......................................................................................51
8.3 SNMP..............................................................................................52
8.4 Syslog..............................................................................................53
8.5 Upgrade Firmware ..........................................................................54
9. SYSTEM INFORMATION.................................................................................................. 56
9.1 System Status .................................................................................56
9.2 WAN Status.....................................................................................58
10. SPECIFICATIONS............................................................................................................. 61
APPENDIX C TROUBLESHOOTING ......................................................................................... 62
4
1. Introduction
Micronet SP891 Multi-WAN Security Gateway is equipped with two WAN ports for different
kinds of Internet access (xDSL/Cable/Fixed IP) to satisfy high Internet bandwidth demands
in enterprise environments. Network administrators may bind different kinds of Internet
access to designated WAN interfaces to enable load balancing for optimization of network
loading. Dual WAN ports also provide fail-over function. If one line goes down, the other
will automatically take control to ensure continuous network connection. SP891's highly
configurable built-in network firewall provides you with the power to choose specific
services allowed through your network, while keeping all malicious Internet attackers out.
SP891 also provides simple Web-based interface, and it will help network administrators to
set up the router just in few minutes.
1.1 Package Contents
Verify your package contains the following items:
z SP891 Multi-WAN Security Gateway
z Quick Installation Guide
z Manual CD
z Power Adapter
z RJ-45 cable
5
1.2 Features
Micronet SP891 provides the following features:
z Provide 2 WAN ports for Load Balance and outbound fail-over function to ensure
Internet service always available
z Provide 4 ports of 10/100M Ethernet for connecting to a home or office network
z Support Priority QoS by source and destination IP, MAC address and QoS-ToS service
types for best resource allocation
z Provide firewall protection based on DoS, SPI, Ping to Death, Port scan and Access
Control
z Support URL filter, Access filter and session limit for restricting inappropriate
transmission
z Support multi-DMZ, Virtual Server and Special Application functions for Internet Service
hosting
z Support IPsec and PPTP VPN Pass Through
z Support DDNS for dynamic IP environment
z Support Universal Plug and Play (UPnP) for peer-to-peer network connectivity
z Support NAT to share single account with multiple workstations
z Support easy management via Web UI, SNMP, Email alert and Syslog
z Firmware upgradeable for further function enhanced
1.3 System Requirement
z One External xDSL (ADSL) or Cable modem with an Ethernet port (RJ-45)
z Network Interface Card (NIC) for each Personal Computer (PC)
z PCs with a Web-Browser (Internet Explorer 4.0 or higher, or Netscape Navigator 4.7 or
higher)
6
1.4 Physical Description
1.4.1 Front Panel
SP891 Front Panel
POWER LED
This LED comes on when the router is properly connected to power.
Port LEDs
Every RJ-45 port on the front panel relevant two LEDs (10/100M; LINK/ACT) for indicating
the connection speed and activity status.
LEDs Status
Please refer to the following table for LED definition
LED Status Operation
Steady Green Power is on
Power
Off Power is off
Steady Green Firmware unloaded or Hardware error
Off Normal operation
System
Blinking Transmitting or receiving data
Steady Green Network connection established
Off No connection established
LINK/ACT
Blinking Transmitting or receiving data
Steady Green 100M network connection established
LAN
10/100M
Off 10M network connection established
Steady Green Network connection established
WAN
10/100M
Off No connection established
Also, some Status and Error conditions are indicated by combinations of LEDs, as shown
below
LED Action Condition
WAN1 LINK/ACT & 10M/100M LEDs flash alternatively. Firmware Download in
Progress.
WAN1 LINK/ACT & 10M/100M LEDs flash concurrently. MAC address not
assigned.
7
WAN1 LINK/ACT & 10M/100M LEDs solid On
SDRAM error
WAN2 LINK/ACT & 10M/100M LEDs solid On Timer/Interrupt error
LAN1 LINK/ACT & 10M/100M LEDs solid On LAN/WAN error
1.4.2 Rear Panel
SP891 Rear Panel
DC 5V Connect the supplied power adapter here.
WAN 2 Connect the 2
nd
Broadband Modem here, if available.
Reset When pressed and released, the router will reboot (restart) within
1 second and resets to default over 3 seconds.
(Please refer to default setting below)
LAN Ports Connect the PCs to these ports. Both 10BaseT and 100BaseT
connections can be used simultaneously.
Note:
Any port will automatically operate as an "Uplink" port if required.
Just use a normal LAN cable to connect to a normal port on
another hub.
WAN 1 Connect the primary Broadband Modem here.
z Default Settings
When the router has finished booting, all configuration settings will be set to the factory
defaults, including:
IP Address: 192.168.1.1
Network Mask: 255.255.255.0
DHCP Server: enabled
User Name: admin
Password cleared (no password)
8
2. Installation
2.1 Hardware Installation
1. Power all devices down, including PCs, your DSL/Cable modem and SP891.
2. Connect a network cable from one of your PC’s Ethernet port to one of LAN port on the
back of the SP891.
3. Connect the network cable from your DSL/Cable modem to the WAN port of the SP891.
4. Connect the power adapter to the power jack on the rear of SP891, and then plug the
power adapter into the power outlet.
5. Power on the DSL/Cable modem.
2.2 Access Router
Below is a step-by-step instruction on how to access the SP891 from your PCs and get
connection to the Internet.
1. Please set your LAN PC clients to “Obtain an IP Address automatically” so that it can
obtain an IP address from DHCP server. (If you have already configured your PC to
obtain an IP automatically then proceed to step 3).
For all non-Server versions of Windows, the default TCP/IP setting is to act as a DHCP
client. Just start (or restart) your PC, and it will obtain an IP address from the Router.
By default, the SP891 will act as a DHCP Server, automatically providing a suitable IP
Address (and related information) to each PC when the PC boots. This section will
show you how to configure your PC’s for either Windows 95/98/Me, 2000, NT operating
systems, Macintosh or Linux. For other operating systems (Macintosh, Sun, etc.),
follow the manufacturer’s instructions.
9
y Windows 95/98/Me
a. Click the Start button and select Settings, then click Control Panel. The
Control Panel window will appear.
b. Double-click Network icon. The Network window will appear.
c. Check your list of Network Components. If TCP/IP is not installed, click the Add
button to install it now. If TCP/IP is installed, go to step 6.
d. In the Network Component Type dialog box, select Protocol and click Add
button.
e. In the Select Network Protocol dialog box, select Microsoft and TCP/IP and
then click the OK button to start installing the TCP/IP protocol. You may need
your Windows CD to complete the installation.
f. After installing TCP/IP, go back to the Network dialog box. Select TCP/IP from
the list of Network Components and then click the Properties button.
g. Check each of the tabs and verify the following settings:
Bindings: Check Client for Microsoft Networks and File and printer sharing
for Microsoft Networks.
Gateway: All fields are blank.
DNS Configuration: Select Disable DNS.
WINS Configuration: Select Disable WINS Resolution.
IP Address: Select Obtain IP address automatically.
h. Reboot the PC. Your PC will now obtain an IP address automatically from your
Broadband Router’s DHCP server. Once you’ve configured your PC to obtain
an IP address automatically, please proceed to Step 3.
Note: Please make sure that the Broadband router’s DHCP server is the only
DHCP server available on your LAN.
10
y Windows XP
a. Click the Start button and select Settings, then click Network Connections. The
Network Connections window will appear.
b. Double-click Local Area Connection icon. The Local Area Connection window
will appear.
c. Check your list of Network Components. You should see Internet Protocol
[TCP/IP] on your list. Select it and click the Properties button.
d. In the Internet Protocol (TCP/IP) Properties window, select Obtain an IP
address automatically and Obtain DNS server address automatically as
shown on the following screen.
e. Click OK to confirm the setting. Your PC will now obtain an IP address
automatically from your Broadband Router’s DHCP server. Once you’ve
configured your PC to obtain an IP address automatically, please proceed to
Step 3.
Note: Please make sure that the Broadband router’s DHCP server is the only
DHCP server available on your LAN.
11
y Windows 2000
a. Click the Start button and select Settings, then click Control Panel. The
Control Panel window will appear.
b. Double-click Network and Dial-up Connections icon. In the Network and
Dial-up Connection window, double-click Local Area Connection icon. The
Local Area Connection window will appear.
c. In the Local Area Connection window, click the Properties button.
d. Check your list of Network Components. You should see Internet Protocol
[TCP/IP] on your list. Select it and click the Properties button.
e. In the Internet Protocol (TCP/IP) Properties window, select Obtain an IP
address automatically and Obtain DNS server address automatically as
shown on the following screen.
f. Click OK to confirm the setting. Your PC will now obtain an IP address
automatically from your Broadband Router’s DHCP server. Once you’ve
configured your PC to obtain an IP address automatically, please proceed to
Step 3.
Note: Please make sure that the Broadband router’s DHCP server is the only
DHCP server available on your LAN.
12
y Windows NT
a. Click the Start button and select Settings, then click Control Panel. The
Control Panel window will appear.
b. Double-click Network icon. The Network window will appear. Select the
Protocol tab from the Network window.
c. Check if the TCP/IP Protocol is on your list of Network Protocols. If TCP/IP is
not installed, click the Add button to install it now. If TCP/IP is installed, go to
step 5.
d. In the Select Network Protocol window, select the TCP/IP Protocol and click
the Ok button to start installing the TCP/IP protocol. You may need your
Windows CD to complete the installation.
e. After you install TCP/IP, go back to the Network window. Select TCP/IP from
the list of Network Protocols and then click the Properties button.
f. Check each of the tabs and verify the following settings:
IP Address: Select Obtain an IP address from a DHCP server.
DNS: Let all fields are blank.
WINS: Let all fields are blank.
Routing: Let all fields are blank.
g. Click OK to confirm the setting. Your PC will now obtain an IP address
automatically from your Broadband Router’s DHCP server. Once you’ve
configured your PC to obtain an IP address automatically, please proceed to
Step 3.
Note: Please make sure that the Broadband router’s DHCP server is the only
DHCP server available on your LAN.
13
y Macintosh Clients
From your Macintosh, you can access the Internet via the Router. The procedure is
as follows.
1. Open the TCP/IP Control Panel.
2. Select Ethernet from the Connect via pop-up menu.
3. Select Using DHCP Server from the Configure pop-up menu. The DHCP Client
ID field can be left blank.
4. Close the TCP/IP panel, saving your settings.
Note:
If using manually assigned IP addresses instead of DHCP, the required changes
are:
• Set the Router Address field to the Router’s IP Address.
• Ensure your DNS settings are correct.
y Linux Clients
To access the Internet via the Router, it is only necessary to set the Router as the
"Gateway", and ensure your Name Server settings are correct.
Ensure you are logged in as "root" before attempting any changes.
Fixed IP Address
By default, most UNIX installations use a fixed IP Address. If you wish to
continue using a fixed IP Address, make the following changes to your
configuration.
1. Set your Default Gateway to the IP Address of the Router.
2. Ensure your DNS (Name server) settings are correct.
To act as a DHCP Client (recommended)
The procedure below may vary according to your version of Linux and X
-windows shell.
1. Start your X Windows client.
2. Select Control Panel - Network
3. Select the "Interface" entry for your Network card. Normally, this will be
called "eth0".
4. Click the Edit button, set the "protocol" to "DHCP", and save this data.
5. To apply your changes
Use the "Deactivate" and "Activate" buttons, if available.
OR, restart your system.
2. Restart your computer if necessary.
3. Open the Internet Explorer and type http://192.168.1.1
(broadband router’s IP address)
into the browser address window to access the SP891.
4. You will see the Login information request page popping up as shown below. Key in the
14
user name field as “admin” and leave the password field blank.
Note: By default the password is empty. For security reasons it is recommended that
you change the password as soon as possible.
5. The home page will show up after login in process as the figure below.
6. In the “Basic Configure” field, select “Primary Setup” from the menu and configure
WAN 1 and/or WAN 2 as required. Please fill in the information necessary to access the
Internet.
15
3. Basic Configuration
SP891 provides a web-based interface, allowing users to configure and manage the router
remotely from web browser.
3.1 Primary Setup
Select Primary Setup from the menu, to see a screen like the example below.
• Configure WAN 1 and/or WAN 2 as required.
• For any of the following situations, refer to Chapter 3.2: Advanced Port Setup for any
further configuration, which may be required.
Using both ports
Multiple IP addresses on either port
Multiple PPPoE sessions
PPTP connection method
Figure: Primary Setup
Settings – Primary Setup
Connection
• Interface – Select which WAN (WAN1 or WAN2) to be setup.
• Connection Mode
Select the appropriate setting:
Enable – Select this if you have connected a broadband
modem to this port.
Disable – Select this if there is no broadband modem
16
connected to this port.
Backup – Use this if you have a broadband modem on
each port, and wish to normally use only one. Select Enable
for the primary port, and Backup for the secondary port. The
Backup port will only be used if the primary port fails.
• Connection Type
Check the data supplied by your ISP, and select the appropriate
option.
Static IP – Select this if your ISP has provided a Fixed or
Static IP address. Then enter the data into the Address
Info fields.
Dynamic IP – Select this if your ISP provides an IP
address automatically, when you connect. You can ignore
the Address Info fields.
PPPoE – Select this if your ISP uses this method.
(Usually, your ISP will provide some PPPoE software. This
software is no longer required, and should not be used.)
If this method is selected, you must complete the PPPoE
dialup fields.
• PPTP Connection – This is for PPTP users only.
1. Enter the Username and Password provided by your ISP.
2. If using PPTP, enable the PPTP Connection checkbox, and
enter the IP address of the PPTP server.
Note:
If using the PPTP connection method, select Static IP or Dynamic IP,
as appropriate; according to the IP address method used by your ISP.
Address
Information
This is for Static IP users only. Enter the address information provided
by your ISP. If your ISP provided multiple IP address, you can use the
Multi-DMZ screen to assign the additional IP addresses.
DNS
(Optional for
dynamic IP)
If using a Fixed IP address, you MUST enter at least 1 DNS address.
If using Dynamic IP or PPPoE, DNS information is optional.
Optional
• Host name – This is required by some ISPs. If your ISP has
provided a Host Name, enter it here. Otherwise, you can use the
default value.
• Domain name – This is required by some ISPs. If your ISP
provide a Domain Name, enter it here. Otherwise, you can use the
default value.
• MAC address – Some ISP's record your MAC address (also
called "Physical address" or "Network Adapter address"). If so,
17
you can enter the MAC address expected by your ISP in this field.
Otherwise, this should be left at the default value.
Setup of the Router is now completed. PCs on your LAN must now be configured. See the
following section for details.
3.2 LAN & DHCP
Select LAN & DHCP from the menu. You will see a screen like the example below.
These screens and settings are provided to deal with non-standard situations, or to
provide additional options for advanced users.
Existing DHCP Server
If your LAN already has a DHCP Server, and you wish to continue using it, the following
configuration is required.
y The DHCP Server function in the Router must be disabled.
y Your DHCP Server must be configured to provide the Router's LAN IP address as the
"Default Gateway".
y Your DHCP Server must provide correct DNS addresses to the PCs.
Figure: LAN & DHCP
Settings – LAN & DHCP
LAN IP
Configuration
• IP address - for the Router, as seen from the local LAN.
Use the default value unless the address is already in use
or your LAN is using a different IP address range. In the
latter case, enter an unused IP Address from within the
range used by your LAN.
18
• Subnet Mask - The default value 255.255.255.0 is
standard for small (class "C") networks. For other networks,
use the Subnet Mask for the LAN segment to which the
Router is attached (the same value as the PCs on that LAN
segment).
Optional
Configuration
y DHCP Server Setup - If Enabled, the Router will allocate
IP Addresses to PCs (DHCP clients) on your LAN when
they start up. The default and recommended value is
"Enable". (Windows systems, by default, act as DHCP
clients. This setting is called Obtain an IP address
automatically.) If you are already using a DHCP Server,
the DHCP Server setting must be Disabled, and the
existing DHCP server must be set to provide the IP address
of the Router as the Default Gateway.
y LAN Any IP –By default is disabled. If you enable “LAN Any
IP”, that means no matter what static IP address hold on
the client (your PC). The client has do not need to change
the IP address, even though it has different IP segment
than LAN segment. It still can access Internet through NAT.
DHCP
Configuration
y Lease Time – It is a finite period of time for a DHCP server
lease an IP address to a client.
y DNS Server IP for Client – An IP address of the default
DNS server for the client requesting DHCP service.
y Offered IP Range fields set the values used by the DHCP
server when allocating IP Addresses to DHCP clients. This
range also determines the number of DHCP clients
supported.
View DHCP List
This table shows the IP addresses which have been allocated by
the DHCP Server. For each address which has been allocated,
the following information is shown.
Free Entry indicates how many DHCP entries are not currently
allocated, and still available.
• Name – The "hostname" of the PC. In some cases, this
may not be known.
• MAC Address – The physical address (network adapter
address) of the PC.
• IP Address – The IP address allocated to this PC.
• Type – Indicates IP address to be dynamic or static.
• Status – If Dynamic, the IP address was allocated by this
DHCP Server. If Sniffed, the IP address was detected by
19
examining the LAN, rather than allocated by the DHCP
Server. In this case, the Name is usually not known.
• Time Left – The time expired since which IP address is
leased.
20
4. Advanced Port Setup
Overview
y Port Options contains some options, which can be set on either or both WAN ports. For
most situations, the default values are satisfactory.
y Load Balance screen is only functional if you are using both WAN ports. It allows you to
determine the proportion of WAN traffic sent through each port.
y Advanced PPPoE setup is required if you wish to use multiple sessions on one or both
of the WAN ports. It can also be used to manually connect or disconnect a PPPoE
session. Otherwise, this screen can be ignored.
y Advanced PPTP setup is required if using the PPTP connection method.
4.1 Port Options
Figure: Port Options
Settings – Port Options
Interface
• WAN Ports – To select the WAN port for option settings
• MTU – The largest amount of data that can be transferred
across a given physical network. Ethernet limits transfers to
1500 octets of data. Normally, you should leave this value at
its default value. Change it only if the ISP is providing a MTU.
Connection
Health Check
• Method –
ICMP: The health check is performed by sending an ICMP
echo request packet to the specific destination.
The specific destination ("Alive Indicator") could be either:
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
/
